CVE-2016-10227

Опубликовано: 21 фев. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service (CPU consumption) via a flood of ICMPv4 Port Unreachable packets.

Ссылки

http://www.securityfocus.com/bid/97105
http://www.zyxel.com/support/announcement_blacknurse_attack.shtml
Patch
Vendor Advisory
https://cxsecurity.com/issue/WLB-2017020177
Exploit
Third Party Advisory
http://www.securityfocus.com/bid/97105
http://www.zyxel.com/support/announcement_blacknurse_attack.shtml
Patch
Vendor Advisory
https://cxsecurity.com/issue/WLB-2017020177
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:zyxel:usg50_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:zyxel:usg50:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:zyxel:nwa3560-n_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:zyxel:nwa3560-n:-:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00987

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-69qp-9fmq-hh37